Skip to content

Conversation

@kkartunov
Copy link
Collaborator

No description provided.

kkartunov and others added 20 commits November 3, 2025 11:41
[PROD HOTFIX] - add wipro group for TG community
Prod hotfix - Get off of v3jwt and fix MM related issues
HOTFIX - Only look at latest submissions for provisional score ranking
Fix review opportunity filtering
@kkartunov kkartunov requested a review from jmgasper as a code owner December 17, 2025 13:07
@kkartunov kkartunov merged commit 806c174 into develop Dec 17, 2025
8 of 10 checks passed
- run:
name: App npm install
command: npm install
command: npm ci

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[⚠️ correctness]
Switching from npm install to npm ci is a good practice for CI environments as it ensures a clean install based on the lock file. However, ensure that the package-lock.json is up-to-date and committed to the repository to avoid inconsistencies.

--url https://circleci.com/api/v2/project/github/$CIRCLE_PROJECT_USERNAME/$CIRCLE_PROJECT_REPONAME/pipeline \
--header "Circle-Token: ${CIRCLE_TOKEN}" \
--header 'content-type: application/json' \
--data '{"branch":"'"$CIRCLE_BRANCH"'","parameters":{"run_smoketesting":true , "run_performancetesting":false, "run_basedeployment": false}}'

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[❗❗ security]
Ensure that the Circle-Token used in the curl command is securely managed and not exposed in logs or version control. Consider using environment variables or CircleCI's secure contexts to manage sensitive information.

RUN npm config set unsafe-perm true
RUN git config --global url."https://git@".insteadOf git://
RUN npm install
RUN npm ci

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[⚠️ correctness]
Switching from npm install to npm ci is a good change for ensuring a clean and consistent install of dependencies based on the package-lock.json. However, ensure that the package-lock.json is up-to-date and committed to the repository to avoid potential issues with missing or outdated dependencies.


// handle values that might contain '='
const cookieValue = decodeURIComponent(cookieStr.split('=').slice(1).join('='));
return JSON.parse(cookieValue);

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[❗❗ correctness]
Consider adding error handling for JSON.parse to handle cases where the cookie value is not a valid JSON string. This could prevent unexpected runtime errors.

* @param url - The base URL to append parameters to
* @returns URL with UTM parameters appended, or original URL if no cookie exists
*/
export function appendUtmParamsToUrl(url, defaultParams = {}) {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[⚠️ correctness]
The function appendUtmParamsToUrl should validate that url is a valid URL string before proceeding. This would prevent potential exceptions when constructing the URL object.

}

try {
const urlObj = new URL(url, window.location.origin);

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[⚠️ correctness]
Using window.location.origin as a base for the URL constructor may not be appropriate if the url parameter is an absolute URL. Consider checking if url is absolute before using window.location.origin.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants